Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa
File:                     3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          o+XAEZ0iTk7+XrYc8u03MxUQ+1laASrFM559UsVdxE4=
Subject key identifier:   77:5D:E4:E2:36:0D:17:52:E2:57:7E:D2:1C:5D:34:6C:EB:1E:86:65
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       6EC8819E2F4F1E7E423D1FE25C2C436175021373
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa
Signing time:             Mon 25 Nov 2024 16:52:36 +0000
ROA not before:           Mon 25 Nov 2024 16:47:36 +0000
ROA not after:            Mon 24 Nov 2025 16:52:36 +0000
asID:                     270814
IP address blocks:        170.247.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 10:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c8:81:9e:2f:4f:1e:7e:42:3d:1f:e2:5c:2c:43:61:75:02:13:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Nov 25 16:47:36 2024 GMT
            Not After : Nov 24 16:52:36 2025 GMT
        Subject: CN=775DE4E2360D1752E2577ED21C5D346CEB1E8665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:20:1a:15:b8:5e:0e:3d:a5:cb:26:e8:a3:
                    f9:10:39:15:54:e2:e0:43:3a:6c:c8:94:78:e1:c0:
                    44:5e:82:01:5b:1b:87:94:45:59:ba:8c:1b:d6:e5:
                    25:a2:54:f3:3e:ef:d7:c6:b5:21:e3:c9:a0:f0:db:
                    78:c9:45:96:79:1d:cb:b9:b4:93:b0:13:5c:b2:c1:
                    58:52:80:1b:66:12:fa:c0:4a:92:db:0c:d9:7d:ad:
                    1d:61:06:c8:45:4e:0d:38:12:c0:a7:72:6c:0a:db:
                    d1:22:54:69:e2:33:88:a6:4f:dd:f3:d4:fa:9f:a5:
                    57:71:c6:fa:1c:9f:83:04:b3:e7:e4:80:91:61:b7:
                    3a:73:bc:ca:85:be:88:83:89:e6:19:7a:7a:04:ba:
                    59:10:5a:d0:0d:04:e4:00:6b:b7:95:54:72:cb:c3:
                    29:a9:32:35:44:fb:82:5c:c0:5b:d9:73:42:8f:f2:
                    7e:7e:1c:33:41:12:0c:15:88:08:3a:6e:09:3e:cf:
                    64:ac:d7:4f:a1:34:af:88:c1:ed:99:c6:05:87:f0:
                    e9:c3:d1:4a:4a:c7:cd:b7:f4:c6:79:07:8c:1b:13:
                    3f:66:d6:1e:6f:6d:27:88:16:51:e4:01:71:9e:dc:
                    b1:82:ac:b1:82:6c:4f:29:ae:9b:f5:fd:6e:2d:b1:
                    25:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5D:E4:E2:36:0D:17:52:E2:57:7E:D2:1C:5D:34:6C:EB:1E:86:65
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:46:b4:90:9b:fa:2a:d0:20:a5:06:ab:3b:fb:25:94:57:bc:
         58:22:48:7d:af:be:62:22:7f:b0:b5:3b:88:12:9f:cf:e2:32:
         bc:11:b1:b2:24:0c:83:34:8a:03:6e:5e:54:fe:75:ce:59:26:
         f7:04:f8:d5:a1:16:d0:57:ba:21:d5:fe:ee:ec:65:d2:ec:63:
         30:5c:0d:d2:6d:26:30:7b:eb:08:d2:40:d3:90:8e:92:24:95:
         e8:b1:ab:8c:3b:49:21:30:fa:59:47:4b:91:f0:e7:ad:80:96:
         bf:b9:1a:13:2a:4b:65:cd:77:7c:df:cd:cc:40:ce:43:ec:6f:
         10:a5:61:94:9c:9b:ea:2c:1a:bb:31:87:a1:2c:e5:fb:b2:93:
         64:9a:af:c9:15:6a:ef:65:fc:1f:10:eb:cd:3d:cc:ed:25:65:
         e6:45:5f:d6:f2:18:db:40:28:98:4b:44:f0:41:cd:2b:00:fc:
         cb:b3:00:37:e8:dc:c4:61:61:c3:95:aa:9e:9a:e5:20:7a:04:
         84:6c:16:8c:03:bf:56:0d:d4:1b:86:51:52:c1:7a:95:85:e7:
         91:38:bc:12:3a:d8:23:dd:e7:46:d4:1a:ee:dd:ff:7a:44:93:
         13:a0:90:a5:03:d5:19:ac:87:1a:92:a2:23:a0:49:16:ae:54:
         d6:c7:fe:ff
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbsiBni9PHn5CPR/iXCxDYXUCE3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZGNEQ4NEY1RUExODczOEIzOTgzODJCQjg2NjQ4NDAy
MjUwMDhGOTAeFw0yNDExMjUxNjQ3MzZaFw0yNTExMjQxNjUyMzZaMDMxMTAvBgNV
BAMTKDc3NURFNEUyMzYwRDE3NTJFMjU3N0VEMjFDNUQzNDZDRUIxRTg2NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPSAaFbheDj2lyyboo/kQORVU
4uBDOmzIlHjhwEReggFbG4eURVm6jBvW5SWiVPM+79fGtSHjyaDw23jJRZZ5Hcu5
tJOwE1yywVhSgBtmEvrASpLbDNl9rR1hBshFTg04EsCncmwK29EiVGniM4imT93z
1PqfpVdxxvocn4MEs+fkgJFhtzpzvMqFvoiDieYZenoEulkQWtANBOQAa7eVVHLL
wympMjVE+4JcwFvZc0KP8n5+HDNBEgwViAg6bgk+z2Ss10+hNK+Iwe2ZxgWH8OnD
0UpKx8239MZ5B4wbEz9m1h5vbSeIFlHkAXGe3LGCrLGCbE8prpv1/W4tsSU/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUd13k4jYNF1LiV37SHF00bOsehmUwHwYDVR0j
BBgwFoAUH/TYT16hhzizmDgruGZIQCJQCPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRGdERucFlKa0NKc2R0U3FqWW9oM1JGd29DTDlQQVdDZEpLU3VteHhK
UWkvMC8xRkY0RDg0RjVFQTE4NzM4QjM5ODM4MkJCODY2NDg0MDIyNTAwOEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRjREODRGNUVBMTg3MzhC
Mzk4MzgyQkI4NjY0ODQwMjI1MDA4RjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0RnREbnBZSmtDSnNkdFNxallvaDNSRndvQ0w5UEFXQ2RKS1N1bXh4SlFpLzAv
MzEzNzMwMmUzMjM0MzcyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM4MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr3fDANBgkqhkiG9w0BAQsFAAOCAQEAL0a0
kJv6KtAgpQarO/sllFe8WCJIfa++YiJ/sLU7iBKfz+IyvBGxsiQMgzSKA25eVP51
zlkm9wT41aEW0Fe6IdX+7uxl0uxjMFwN0m0mMHvrCNJA05COkiSV6LGrjDtJITD6
WUdLkfDnrYCWv7kaEypLZc13fN/NzEDOQ+xvEKVhlJyb6iwauzGHoSzl+7KTZJqv
yRVq72X8HxDrzT3M7SVl5kVf1vIY20AomEtE8EHNKwD8y7MAN+jcxGFhw5Wqnprl
IHoEhGwWjAO/Vg3UG4ZRUsF6lYXnkTi8EjrYI93nRtQa7t3/ekSTE6CQpQPVGayH
GpKiI6BJFq5U1sf+/w==
-----END CERTIFICATE-----
Generated at Fri Nov 29 10:38:40 2024 by rpki-client on console-fra.rpki-client.org